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Reply to Office Action of July 1 8, 2006 



Amendments to the Claims 

Please amend claims 1 and 2, without prejudice. 
Please add new claims 14-19. 

This listing of claims will replace all prior versions, and listings of claims in the 
application: 

Listing of Claims: 

1. (Currently Amended) A computerized system for providing subscriber control 
of network parameters comprising: 

a service processing switch having a plurality of network resources allocatable to 
one or more virtual routers of a plurality of virtual routers executing within the service 
processing switch , wherein differing subsets of the plurality of virtual routers are 
allocatable to each of a plurality of subscribing enterprises; 

a service provider management server communicably coupled to the service 
processing switch and operable to configure the plurality of network resources, said 
configuration including an allocation of a subset of the network resources to a first 
subscribing enterprise of the plurality of subscribing enterprises by allocating a first set of 
virtual routers of the plurality of virtual routers to which the subset of the network 
resources have been allocated to the first subscribing enterprise ; 

a subscriber management server communicably coupled to the service provider 
management system and operable to further configure the subset of the network resources 
responsive to configuration requests received from the first subscribing enterprise ; and 

a subscriber management client , associated with the first subscribing enterprise, 
communicably coupled to the subscriber management server, said subscriber 
management client operable to cause the subscriber management server to further 
configure the subset of the network resources as desired by the first subscribing 
enterprise by [[issue]] issuing the configuration requests to the subscriber management 
server. 
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2. (Currently Amended) A computerized method for configuring network 
resources, the method comprising: 

allocating^ by a service provider^ a subset of network processing resources of a 
service processing switch operated by the service provider to one or more virtual routers 
of a plurality of virtual routers executing on the service processing switch ; 

allocating at least one of the one or more virtual routers to a subscribing enterprise 
of a plurality of subscribing enterprises associated with the service provider ; 

receivings by a subscriber management system associated with the service 
provider, a configuration request related to the subset of network processing resources 
allocated to the at least one virtual router from a user within the subscribing enterprise; 

forwarding the configuration request to a service provider management server 
associated with the service provider ; and 

configuring the subset of network processing resources in accordance with the 
configuration request by processing the configuration request by the service provider 
management system server. 

3. (Previously Presented) The system of claim 1, wherein the plurality of network 
resources includes a packet filter. 

4. (Previously Presented) The system of claim 1, wherein the plurality of network 
resources includes a firewall. 

5. (Previously Presented) The system of claim 1, wherein the plurality of network 
resources includes a network address translation module. 

6. (Cancelled) 

7. (Previously Presented) The system of claim 1, wherein the plurality of network 
resources includes a virtual private network (VPN). 

8. (Previously Presented) The system of claim 1, wherein the plurality of network 
resources includes one or more processing elements. 
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9. (Previously Presented) The method of claim 2, wherein the plurality of network 
resources includes a packet filter. 

10. (Previously Presented) The method of claim 2, wherein the plurality of network 
resources includes a firewall. 

1 1 . (Previously Presented) The method of claim 2, wherein the plurality of network 
resources includes a network address translation module. 

12. (Cancelled) 

13. (Previously Presented) The method of claim 2, wherein the plurality of network 
resources includes one or more processing elements. 

14. (New) The system of claim 1, wherein the service provider management server 
includes a choking component logically interposed between the subscriber management 
server and the service provider management server, the choking component configured 
to protect the service provider management server from a flood of subscriber 
management requests by queuing configuration requests when a pending number of 
configuration requests exceeds a predetermined threshold. 

15. (New) The system of claim 1, wherein the first subscribing enterprise is 
provided with an ability to easily and rapidly generate configuration information for 
large numbers of the subset of the network resources based on profiles. 

16. (New) The system of claim 1, wherein the first subscribing enterprise may issue 
to the subscriber management server requests relating to one or more of: 

monitoring a current configuration of the subset of the network resources 
allocated to the first subscribing enterprise; 

monitoring a current status of the subset of the network resources allocated to the 
first subscribing enterprise; 

generating reporting information for ports of the service processing switch 
allocated to the first subscribing enterprise; and 
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generating reporting information for tunnels allocated to the first subscribing 
enterprise. 

17. (New) The method of claim 2, further comprising a choking component of the 
subscriber management system logically interposed between the subscriber 
management system and the service provider management server, protecting the service 
provider management system from a flood of subscriber management requests by 
queuing configuration requests received from the subscribing enterprise when a 
pending number of configuration requests exceeds a predetermined threshold. 

18. (New) The method of claim 2, further comprising the subscribing enterprise 
generating configuration information for large numbers of the subset of network 
processing resources based on profile-driven approach. 

19. (New) The method of claim 2, further comprising the subscriber management 
system responding to requests from the subscribing entity for information regarding one 
or more of: 

a current configuration of the subset of the network processing resources allocated 
to the subscribing enterprise; 

a current status of the subset of the network processing resources allocated to the 
subscribing enterprise; 

statistics regarding ports of the service processing switch allocated to the 
subscribing enterprise; and 

statistics regarding tunnels allocated to the subscribing enterprise. 
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